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Subject! Operational changes for MR *♦. 

IttIgQ.QUQJ.Ifla 

A new version of the Multics storage system has been 
installed with system MR 4.0. This version of the system will be 
much more reliable and be able to handle more storage. 

fl&iinit,AQQS 

Several terms are used often in describing the new storage 
system's operations 

physical volume A disk pack. Sometimes we speak of the 

combination of pack and disk drive as the 
volume. 

volume label Each physical volume has a label which 

identifies it to the system. 

VTOC Each physical volume contains a Volume 

Table of Contents (VTOC), which lists 
information about the segments on the 
volume. 

root physical volume (RPV) The physical volume which contains 

the root directory. It also contains the 
hardcore partition. 

partition A block of disk storage used for a special 

purpose. 

hardcore partition A partition used for paging those segments 

which come in off the system tape or are 
created during boot load. 



Multics Project internal working cocumentation. Not to be 
reproduced or distributed outside the Multics Project. 
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logical volume A set of physical volumes always used 

together. 

root logical volume (RLV) The only logical volume which 

contains directories. 

record 'A 1024-word contiguous block of disk. 

Each volume has Multics records numbered 
starting with zero to a maximum which 
depends on the model number of the disk 
pack and drive. 

sector A 64-word block of disk. A sector is the 

smallest addressable unit of disk with the 
current hardware. Each Multics record 
contains 16 sectors. Fiela engineering 
test and diagnostic programs and some 
other special applications may use sector 
addressing* but its use is rare in normal 
operation. Since no Multics record is 
split across disk cylinders* there may be 
some sectors on a disk pack which are not 
part of any record* depending on the model 
number of the disk. 

The term "area" will not be used any more to describe a 
particular disk drivel all disk drives will be identified by 
subsystem name and drive number. Drive numbers start at 1. 



aalacchaaflss 

There are four ne** rules imposed by the new storage systemi 

1* Alt the pages of a segment are always on the same 
physical volume. In older versions of the 
supervisor* any page of a segment might be found 
on on any disk unit. 

2. All segments in the same directory are always in 
the same logical volume. This attribute of a 
directory is its "sons logical volume ID" or 
"sons_lvid." Usual ly» when a directory is 
created* the new directory gets the same sons_lvid 
as the parent directory. A directory whose 
sons_lvid is different from its parent directory's 
sons_lvid is called a m aste r director* ' 

3« All directories are always on the root logical 
volume. 

<*• All logical volumes are registered. The 
registration information for a logical volume 
includes the list of physical volumes in the 
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logical volume and the access control rules for 
use of the logical volume* 

These changes mean that if a single disk unit has a head crash it 
will be much easier to find out what segments were lost and 
whether the system can continue to run. Often, after a crash* 
the operator wilt oe able to reload only those volumes whose 
contents were damaged. Under the old system, any head crash was 
bound to destroy a few pages each of many directories; in the new 
system only those physical volumes which are part of the root 
logical volume have directories on them. 

£flDients of a Physical Moiajae. 

The contents of a physical volume look like thisi 



low l Volume Label I 

! Volume Hap 1 

I VTOC header and error data 1 

i t 

I VTOC J 

i i 

> i 

I Pages of segments 1 

t 1 

I t 

1 Partitions {optional) 1 



Not all volumes have partitions, and the partitions may exist 
either at the top of the pages of segments (as shown in the 
picture), or between the VTOC and the pages of segments. 
Partitions must al ways reside completely on a single physical 
volume. 
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Many changes have been made to BOS. Most of these are a 
result of the new volume organization. 



Qi PP f JSu Dack Changes 

The most important change in BOS is that the old notion of a 
partition* defined by a PART card* has been replaced* 

The PART MULT card used to define the total space available 
for Multics segments* There is no PART MULT card under the new 
storage system and 80S does not Know which volumes are to be used 
for Multics paging. Only Multics has this information. 

PART cards are still used to tell BOS about the special 
areas of the disk storage which it uses for FOUMP, and for BOS 
itself, and to tell Multics where the FOUMP, SYSERR log, and HC 
(hardcore) partitions are. The new format of a PART card looks 
like thisi 

PART <partname> <subsystem> <drive> 
Examplel PART LOG 0SK7 5 

This card says that the LOG partition is to reside on the volume 
mounted on drive 5 of disk subsystem 0SK7. The system Mill 
consult the label of that volume to find where the records of the 
LOG partition are to reside. During a cold boot, additional 
information is specified on the PART card for any partitions to 
reside on the RPV. 

Disk subsystems used to be defined by D191 or E191 or 
whatever cards in the CONFIG deck. These subsystems are now 
defined by the PRPH card, which looks like this* 

PRPH <subsystem> <iom> <chn> <ncf»n> <modell> <ni> ... 
Examplel PRPH DSK7 A 30 4 <tOG. 9. t»50. 2 

AH disk subsystems have names of the form DSKx, x arbitrary. 
This card describes the 0SK7 subsystem. It is connected to IOM 
A, on channels 30-33. Drives 1 through 9 are model MSUQ<»0Q 
drives, and drives ifl and li are model MSU0<»50 drives. 

The valid model numbers are* 

181. 0SU181 

191. 0SSi9i (same as MSUQ'+gG) 

<f0 0. Msue<tao 

<»5Q. f1SU0i»50 

The ROOT card is new. it points out the location of the 
root physical volume. 
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ROOT <subsystem> <drive> 
Example* ROOT 0SK7 1 

by specifying the subsystem name and drive number. The disk unit 
pointed to must be the same as that on the PART HC card, 

A new configuration card has been provided to specify the 
sizes of certain wired-down tables. There may be more than one 
HT8L card? each card may specify up to 6 pairs of the form 
<id> <iength> where the length is in words. 

KTBL <idi> <lengthi> ... 
Examplet WTBL VTB iC2<+. PVT 102^. 
WTBL TTY8 20<«8. 

The following is a table of the valid arguments to the WTBL cardt 



id 

0355 

OISK 

OST 

IOBM 

IOMO 

PRT8 

PVT 

SYST 

TTYB 

VTB 



Segment Name 

dn355_data 
disk_seg 
dst_seg 
iobm_data 
iom_data 
printer_trace_ buffer 
pwt 
system_trace_seg 
tty_buf 
vtoc_buf fer_seg 



Default Lth 

360. 

500. 

768. 

152. 

532. 

Q. 

20^8. 

0. 

61 M». 

20<f8. 



The TTYB and PRT8 cards become obsolete* and must not be used. 
If present in the CONFIG deck, they must be changed to WTBL 
cards. 

The SST card must be adjusted because the size of an AST 
entry has increased from 8 words to 12. Either the segment size 
must be increased* or the pool sizes must be decreased. For 
example* if a site has the following SST card 

SST 36. 576. 370. HC 10. 

then the increase in words for the new system is 
<576+37G*llC + i0)*W132<f* or 5 pages. An alternative woulc be to 
decrease the sizes of the AST pools and keep the SST size 
constant. So either of the following SST cards would be 
reasonable! 



SST <ti. 576. 370. 110. 10. 
SST 36. 430. 317. 1C<*. 10. 

A new parameter is allowed on the DEBG card* for system 

debugging use. If the parameter CRHL is pJt on the DEBG card* 

the system will return to BOS on every attempt to crawl out of 
ring Q* with the message 
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verify_lockt craw I out stop specified on debg card 

so that the system staff can take a dump. Typing GO Mill cause 
the system to continue operation. Another parameter which can be 
specified on the DEBG cara is rr\9 DIRw flag* which causes 
modified directory pages to he written from core whenever a 
directory is unlocked. Specifying this parameter increases the 
safety of the system at some cost in increased paging. 

A new card is used when multiple XOH's are used* to indicate 
which channels can reach a disk subsystem from each IOMJ 

CHNL <subsystem> <iomz> <chn2> <iom3> <chn3> • •• 
Examples CHNL 0SK7 B Zk 

This card is used only when more than one IOM is in the 
configuration. 

To indicate that a group of disk units are to be used for 
user I/O disk packs the former PRPH DISK card has been changed to 
the following: 

UOSK <subsystem> <nchn> <drivei> <countl> ... 
Example* UOSK 0SK7 2 8. 2 

This card specifies the maximum number of channels which may be 
used to support user peripheral disk I/O? if the channels are 
not required for user I/O they are available for storage system 
I/O. Up to six pairs of drive number and number of drives may be 
specified to indicate the particular units which are to be used 
for user peripheral disk I/O. A disk drive can be used for 
either storage system volumes or user peripheral packs; the 
system must be shut down to change the status of a drive from one 
to the other. 

To change the default options for all salvaging operations* 
another card is used. 

SALV <options> 
Examples SALV CNSL RBLO 

The following options are recognized! 

CNSL All output via SYSERR console 

RBLO Rebuild all directories 

PATH Print pathname of all directories salvaged 

DUMP Dump damaged objects 

OEBG debugging use only 

The CNSL option is used when all printers at an installation are 
down. Alt other options should be used only at the direction of 
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the system staff. 

Sample CgoliaucatiflflJl&afe 

Here is a sample configuration deck for a smaii machine. 

CPU B 6 

MEM A 128. ON 

MEM B 128. ON 

IOM A UUU4 

CLOK 5 EST 

PRPH 0SK7 A Zk k 400. 7 * NEW 

ROOT OSK7 1 * NEW 

PART SOS DSK7 1 * NEW 

PART HC DSK7 1 * NEW 

PART LOG OSK7 2 * NEW 

PART DUMP 3SK7 2 * NEW 

UOSK DSK7 17 1 * NEW 

BULK 512. 1 2 

PAGE BULK 100 

SST 30. 223* 110. 40. 6. 

INT 230 231 232 233 22 223 

OPTY OC_ 

SCHO <*0fl003 iQ 10 iGO 

TCD 6. 88. 196. 192. 

TBLS STR 6 

WTBL TTYB 20^8. * REPLACES TTYB 2 

PRPH OPC A 20 IBM i*Q. 

PRPH PRTA A 30 160 0. 600. 136. 

PRPH TAPE A 22 500. 2 2 13 

PRPH RDRA A 32 301. 

PRPH PUNA A 33 301. 

PRPH IMPW A 11 ABSI 6 

PRPH IMPR A 10 ABSI 

MPC A 30 2 A 32 2 

MPC A Zk 3 

MPC A 22 1 A 23 1 

0355 A 21 A 

LSLA A 1 300. 1 133. 2 150. 1 300. 8. 

HSLA A 1200. 2 300. 2 4800. 8. 

HSLA A 20 1200. *» <*80Q. k 

This setup defines a system with 7 MSUQ^OQ drives. 

£tiaDflaS-JLa-flU.MP aafl-gAICJi 

The device addresses typed to DUMP and PATCH when dumping 
specified disk addresses have been changed in a manner similar to 
the config deck changes. Requests to DUMP have the form 
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DEV <volume-des ignator> <device-position> <count> 

where <volume-designator> may be one of 

<subsysfem> <drive> 
PART <partnane> 
ROOT 
BULK 

and <dewice-position> may be one of 

<Multics record nuraber> 
RECORD <Multlcs record number> 
SECTOR <hard«are disk sector nurabep> 

Example* OEV DSK7 i* ±9±7q. 3. 

and a device address request to PATCH has the form 

OEV <vof ume-designator> <device-position> <wordno> 
Example* SET OEV 0SK7 5 10000 767676767676 

&baQfl&s-l.a,SAy E ..aod-3E S TQB 

The elimination of the PART MULT card changes SAVE and 
RESTOR drastically. The command line now specifies only the SAVE 
medium and optionst like this* 

SAVE <output~raedium> <options> 
Example* SAVE TAPE 1 2 ALL BRIEF 

The keywords ALL and BRIEF can also be given, end instead of 
TAPE 1 2 one could say OISK OSK7 3 <♦ or COPY OSK7 5. SAVE (or 
RESTOR) then reads request lines from the BOS input source until 
an ENO request is encountered. Each request specifies one block 
of a physical volume to be dumped. Possible forms are* 

<voiume-designator> <extent> <pv_name> 

where <extent> may be one of 

<device~posit ion> FOR <count> 
<device-oosition> TO <lrec> 
<device-posit ion> ONLY 
ENTIRE 

Example* DSK7 3 FOR 6 R00T2 

DSK7 3 12 TO 17 L003 

OSK7 1 ONLY 

DSK7 3 ENTIRE CHARLIE 

ROOT ENTIRE RPV 

PART LOG ENTIRE RPV 
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The PVNAME specified at SAVE tine will be checked at RESTOR time* 
so that physical volumes need not be remounted on the same device 
addresses. Unless ALL is specified, dumping an ENTIRE pacK Hill 
dump only those records in the volume which are actually used, 
plus the label information, the volume map, and the VTOC* 

For example, to save the volumes on units l and 2 onto disk 
packs on units 3 and k in the sample configuration above, the 
operator might type 

SAVE OISK QSK7 3 «♦ 
0SK7 1 ENTIRE RPV 
0SK7 2 ENTIRE CISL2 
ENO 

(Assuming that the physical volume name of the pack on unit 1 is 
RPV and the name of the pack on unit 2 is CISL2.) The Indented 
lines are request lines read by the SAVE command? each input 
request is acknowledged by a message of the form 

0SK7 1 (M^Ofl A 30J 0. TO 19269. 

but the SAVE does not actually start until ail input has been 
typed and the ENO request given. Hhen SAVE or RESTOR begin a new 
volume of the SAVE medium, they type out a message describing 
what volume address from the Multics data Is on the SAVE medium, 
in the form 

RPV (OSK7 1) 123*»9. ON TAPE 3 

As each volume of the SAVE medium (tape reel or disk pack) is 
finished, SAVE or RESTOR will type out the error count. 

SAVE and RESTOR do some checking of the volume labels of 
disk packs. If an attempt is made to RESTOR the contents of one 
volume onto a volume with a valid label but a different volume 
name, RESTOR will print 

PHYSICAL VOLUME NAME OOES NOT MATCH REQUEST 
REQUEST IS FOR F003AR, BUT VOLUME NAME IS RPV 

and refuse to proceed. Similarly, if an attempt Is made to use a 
storage system volume as a SAVE pack, the message 

NDISKI OSK7 <♦ IS MULTICS STORAGE SYSTEM VOLUME CISL3 

will be printed and no SAVE or RESTOR will be done. Instead of 
typing ENO the operator should type the QUIT request to return to 
BOS command level, he should then check the assignment of packs 
to disk units very carefully. In very rare cases, a pack will 
have an incorrect label left over from a previous use, which 
causes one of the above messages and prevents SAVE and RESTOR 
from operating. The TEST command shocld be used to clear the 
label in this case. 
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£tanafti_la_I£SI_ana_FilI 

The TEST and FMT commands now operate on only one pack or 
part of a pack at a time* One may say 

TEST <subsystem> *drive> <extent> <optlons> 

Example* TEST 3SK7 3 ENTIRE WRITE PATERN 525252525252 

FMT <subsystem> <drive> <extent> 
Example* FMT OSK7 1 FOR 10 

and so forth. The keywords CHECK. WRITE, and PATERN still work 
for TEST. 



Changes to BQQT 

The BOOT command now allows the operator to say any single 
command to Multics ring-1 as an argument to the BOS command. The 
most common form will be to say 

BOOT STAR 

to cause the system to start up without pausing in ring l. The 
Interface between BOS and Multics limits the commands which can 
be typed to four-character items. The following commands are 
val idt 



STAR 


startup 


MULT 


mul tics 


SALV 


sal vage_dlrs 


STAN 


standard 


RPVS 


(see below) 



The printer should be ready and paper synchronized when 
boot-loading the system* since the salvager may be invoked 
automatically. If no printer is available* a SALV CNSL card 
should be used. 



£QLQ_£acd_£iianflfts 

The new format of the COLO card and WARM card for a BOS 
bootloaa deck looks like this* 

<warm_or_cold> <model > <chn> <drive> 
Example* COLO <*Q0. 30 1 

When BOS is bootloaded, the loader will read the label of the 
disk pack at channel 30* unit number i, as if It were a MSUo'tOO 
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drive. The label of this pack Mill be checked for existence of a 
80S partition, and the extents of that partition found in the 
label will be used. The 80S loader Mill type out a message of 
the form 

60S PARTITION AT l9l?Q. FOR i7Q. 

giving the first record address and size of the partition. If no 
SOS partition can be found* one of the following messages will be 
printed! 

CANNOT REAO VOLUME LABEL 

VOLUME OOES NOT HAVE A MULTICS LA8EL 

BOS PARTITION NOT DEFINED IN VOLUME LABEL 

these messages usually result from an Incorrect COLO or WARM 
card, or leaving an incorrect pack mounted. 

For the first boot load of BOS on an empty residence volume, 
a special method must be used, since the pack has no label. In 
this case, the COLD card is replaced by the following card? 

NLABEL <model> <chn> <drive> <device-posi tion> <nrec> 
Example: NLABEL ^00. 30 1 19100. 170. 

The l7fl-record BOS partition occupies addresses 19100-19269 of 
the MSUS^oa pack on drive l, channel 30 of the bootload IOM. The 
next step is to initialize the label of the BOS residence volume, 
by means of a BOOT COLO. This rare situation is the anil, time 
that an NLABEL card should be used, since it can destroy the 
contents of the storage system if packs have been moved. 
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a£fBAIflS_£flflHAttQ-£ttAWi£5 

The salvager is now built into the regular Multics system* 
ana if the system detects an inconsistency while boot! oading* the 
salvager niii be invoked automatically* The operator may also 
request the salvage of the directory hierarchy or of any single 
volume by a command. 

The disk configuration — that is* which disk drives contain 
which physical volumes -- is not expressed on the CONFIG cards* 
and so must be conveyed to the system in another way* The system 
keeps a table of which volume is on which disk unit* called the 
disk_table# and on each bootload assume s that no volumes have 
been moved until told otherwise* In the normal case* the 
operator may start the system up without typing any commands 
which pertain to the disk configuration* For a cold boot* 
however, the operator must tell the system about the position of 
all volumes with the "add_vol" and M add_lv*" commands* which tell 
the system to accept the volume if its label matches the 
registered attributes for the volume* Once the system has been 
told where a volume is* it assumes that It will not be moved* 



lfllua&,&ftflistratlQQ 

Before a storage system volume can be used it must be 
registered* There is a registration file for each logical 
volume* The registration file contains the data necessary to 
mount the logical volume correctly and to control its use* For 
example* the registration file of the logical volume "root" might 
look like this* 

Ivname* root 

Ivid* 22053152^66 

owner: Initial izer.SysOaemon 

public! yes 

min_access_cl ass* 0*000000 

max_access_cl ass* 7X77777? 

acs_path* >lv>root*acs 

npv* 2 

pvnamet rpv 

pvidt 22fl53i52<»3^5 

serial* 2733-58 

model* 4+00 

location* online 

pvname* root2 

pvid* 5 701i»<t0 4516Q 

serial* 2733-59 

model* <*GQ 

I ocation* onl ine 
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This is a sample of the output of the "I ist_vol_registration M 
command described in appendix 8» ~ 

Since the registration file contains the name and model 
number for each pnysical volume in the logical volume* the system 
can tell whether a logical volume is completely mounted, or i f 
there are enough free drives available to mount all its physical 
volumes. 



ACCESS CONTROL 

In each volume registration file, several pieces of 
information about access control are Kept. 



Public and Private Volumes 

A volume may be either PUBLIC or PRIVATE. Public volumes 
are like pre-*».fl disk storages segments on public volumes can be 
referenced by user programs subject to the normal ACL and ring 
checking. To access a segment on a private volume* the user must 
still have appropriate permission to the segment* but in 
addition* the user must have completed a "mount" operation for 
the private logical volume. 

Access Control Segment 

In order to mount a private volume* the user must have 
appropriate access to a special segment cal led the Access Control 
Segment (ACS) for the logical volume. The location of the ACS is 
specified in the volume registration file. 

Access Isolation 

For sites which use the Access Isolation Mechanism, each 
logical volume may have a range of sensitivity levels specified. 
Segments outside the given range cannot exist on any physical 
volume of the logical volume. 

Master Directory Control 

A user may create a master directory for a logical volume 
only if he has a Quota Account for the volume* registered in the 
volume's Master Directory Control Segment (MDCSI. The MDCS lists 
all quota accounts for its logical volume* the master directories 
charged to them, and their quotas. 
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Volume Executive 

Certain users may modify the MQCS for a logical volume* 
These users are called jflluifi L&asmt 1\L££ for the logical volume* 
Volume executives have **e" access to the ACS for the volume* 



DATA BASES 

The volume registration file and the MDCS are ring-i 
segments stored in the directory >lv* The ACS for private 
volumes is stored in a directory named by the volume owner* For 
public volumes* the ACS is Kept in >lv* 

Because the system must be able to access the registration 
file of the root logical volume before it can accept the other 
physical volumes of the root* a special arrangement has been 
made. The registration data for the root logical volume is 
actually kept in segments in the root directory itself* Links 
are placed in >lv which point to the segments in the root 
directory. 

If the system cannot locate a registration file for the root 
logical volume at startup time it recreates one* since the system 
requires this segment in order to operate. 



REGISTERING VOLUMES 

A new operator command* ~add_vo J_registratlon" (avr) is used 
to register all volumes except the RPV. The add_vol_registrat ion 
command can be executed in ring l or ring <»■ A sample call to it 
might look like this* 

avr pv pub3<» -Iv public 

In this example the physical volume named "oubo<t M is being 
registered as a member of the logical volume named "public*"" 

Each physical volume must be registered before it is 
initialized* Nhen the physical volume is initialized* 
registration information from the volume registration data Is 
copied into the physical volume label* Whenever the physical 
volume is mounted* the pnysicai volume label is checked against 
the registration data* 

Many control arguments may be specified to the 
add_voi_registration command. A complete description of the 
command is provided in appendix 8. 

The "change_vol_registration"» "del_vol_registration*** and 
"I ist_vo I .registration" <"cvr", "dvr", and "Ivr") commands are 
also provided to change* delete* and list the volume registration 
data. These commands are also described in appendix B. 
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A special command is provided for regenerating the 
registration data for a physical volume if the registration data 
Has destroyed in a crash* the command 

reregister <pv_ name> <drive> 
Example! reregister george dskb_fli* 

Mill cause the system to read the label of the physical volume on 
the specified drive* and if its volume name is correct, to 
regenerate any missing parts of the registration data. This 
operation is performed automatically as part of startup for all 
volumes which are part of the RLV. 



VOLUME INITIALIZATION 

The M init_vol" command takes a blank disk pack and 
initializes it to be a Multics storage system physical volume by 
writing a label* an empty volume map* and an empty VTOC on the 
pack. Each volume must be initialized before it can be used by 
the storage system. 

Only registered volumes can be initialized. 

The init_vol command reads the label of the physical volume 
it is supposed to register before writing on it. If the label is 
a valid-appearing Multics label, for any other volume* init_vol 
will print an error message and refuse to proceed. This check is 
a safety feature to prevent the accidental destruction of the 
contents of a valid physical volume. In rare cases a pack may 
have a valid-appearing label from some previous application which 
prevents it from being relabeled. In such a case the pach should 
be erased first before init_vol is invoked. 

Mounting Volumes 

Nhen the system is boot loaded* the hardcore system runs in 
the hardcore partition defined on the RPV by the PART HC card in 
the configuration deck. Ouring file system initialization* the 
root directory is located and that section of the directory 
hierarchy which resides on the RPV is made available for the 
system. The root logical volume is defined at this time. Other 
PART cards may point to other disk units? if so, the partitions 
will be located by looking at the labels on the packs on these 
units but segments on these volumes are not made available for 
Multics use during hardcore initialization. 

This is the situation when the system comes up in ring i. 
Only the root logical volume is defined* and the only physical 
volume being used is the RPV. This is the only time that the 
system operates with a partially mounted logical volume. 
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The operator's normal action is to issue a series of add_vol 
commands to cause the other volumes of the root logical volume to 
be mounted, and then to issue add_lv commands and add_vol 
commands for additional logical volumes and the physical volumes 
that maKe them up* 

The operator may Hist the disk table to find out which disk 
drives are mounted by issuing the "list_dlsks" ("Id") command. 
Its output looks like this* 



dska_0l 


root2 


root 


dska_02 


new 


(blue) 


dska_Q3 


<io dri 


ve) 


dska_CH* 






dska_05 


(deleted) 


dska_06 


true 


(blue) 


dska_fl7 






dska_08 






dska__09 






dska_iO 






dska_ii 






dska_12 


rpv 


root 


dska_i3 






dskb_Qi 






dskb_Q2 






dskb_03 






dskb_Q*» 






dskb_05 







**» 



In the example* the operator has issued the command 

add_vol root2 dska_0i 

to complete the root volume* The one star after the line for 
dska_02 indicates that the pack on dska_Q2 is ass u med , to be the 
physical volume "new" of the logical volume "blue." Since It is 
assumed. the system has not yet read its label. The three stars 
after the line for dska_06 indicate that the pack on dska_06 is 
lSOflWQ to be the physical volume "true" of logical volume~"bl ue" 
-- the system has read the label of dska_06 and it matches the 
registration for physical volume "true." The add_vol command 
makes a volume known* but does not make it available for paging 
unless an add_lv is pending and this add_vol completes the 
logical volume. The parentheses around the logical volume name 
indicate that the logical volume "blue" is unavailable for 
paging. 

To cause all assumed and known physical volumes of a logical 
volume to be accepted for paging, the operator issues the add_lv 
command. If this command is issued when some physical volumes of 
the logical volume are not listed in the disk table, the system 
will type out mount messages for each physical volume and will 
then assume that the physical volumes will be mounted on the 
specified volumes. The operator will then t/pe add_vol commands 
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for each physical volume which has been requested. When the last 
add_vol command is typed* the system will respond with a message 
saying that the logical volume is mounted. 

In the example above * if the logical volume "blue" were 
registered to contain cniy the two physical volumes "new" and 
"true*** the operator could issue the command 

add_.lv bl ue 

to cause the label of aska_02 to be read and checked, and to 
cause both physical volumes to be accepted for paging and the 
logical volume to be made available for user use. The system 
would type the message 

public Iv blue mounted 

and the output of iist_disks would then look like this* 

dska_0i root2 root 

dska_02 new blue 

dska_G3 (io drive) 

dska_Qif 

dska_05 (deleted) 

dska_06 true blue 

dska_07 

dska_03 

dska_Q9 

dska_iO 

dska_li 

dska_12 rpv root 

dska_l3 
dskb_Ql 

dskb_02 
dskb_03 
dskb_0<* 
dskb__05 

physical volumes wnich are being used have no stars after their 
name. 

If the system has been brought up after packs have been 
moved, the disk table may show certain assumptions which are no 
longer true. The del_vol (dv) command can be used to erase the 
entries for assumed or known physical volumes from the disk 
table. The del_vol command does not do anything to any disk 
drive; it Just changes the table. 
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At this point it may appear that the operator has to type an 
add_vol command for each physical volume and a add_.lv command for 
each logical volume* in order to get the system started. Not sot 
default assumptions have been built into the system to eliminate 
extra commands when they are not necessary. 

Whenever the Initializer process crosses from ring 1 to ring 
*♦* as a result of the "startup", "mul tics", or "standard" 
commands, the system does an automatic "add_lv root" to insure 
that the root logical volume is complete* If the root cannot be 
completed, the system remains in ring l, since otherwise it might 
attempt to access a directory which was not mounted. 

Whenever the Initializer process attempts to start the 
answering service, as a result of the "startup" or "multics" 
commands, or when a "reload" command is issued, an automatic 
"add_.lv -all" command is executed to attempt to mount ail logical 
volumes which are not in use because one or more of their 
physical volumes is Known or assumed. If any logical volume 
cannot be completed, the answering service startup Is not 
attempted. The operator may then use the del_vol command to 
correct the disk table and try startup again, or may use add_vol 
to obtain the missing volumes. 

These default assumptions mean that if the operator Just 
types "startup" in ring l, as he is used to doing, all volumes 
which were in use at the time of shutdown wil I be re-accepted and 
the system will resume operation. If the operator issues the 
command "BOOT STAR" to BOS, and if all physical volumes are where 
they were at the time of the last crash or shutdown, the system 
will not even pause in ring 1. But if there is any trouble, the 
system will wait for an operator command instead of plunging 
ahead blindly. As described below, the salvager has been 
integrated into this scheme so that if salvaging is necessary it 
is invoked automatically. 

These changes are part of a general plan which will allow 
the system to be left in unattended mode, with a 80S runcom which 
will reboot the system if it crashes. 



_tefflflupila_i-y.o 1 -i&s 

A physical volume may be in one of the following states* 
i. Not mounted 

2. On the drive but drive not ready. 
3» Drive ready, system unaware of contents. 
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i*. Known (system has read label). 

5. In use for storage system or I/O. 

The add_vol and add_.lv commands can move a physical volume to 
higher-numbered states. There are also commanas for moving 
physical volumes back down. 

The command 

del_.lv <lv_name> 
Example: del_.lv blue 

causes the system to sake all segments 
<lv_name> unavailable to users* and 
shutdown and unloading of each physical 
logical volume. As each disk unit is 
form 



on the logical volume 

then causes the orderly 

volume contained in the 

unloaded a message of the 



demounted dska_Q2 

will be printed. Since segments which users may be 
made unavailable by the del_lv command, the operator 
this command only when he is instructed to do so. 



using 
should 



are 
use 



Since the system will encounter errors if a disk drive is is 
stopped manually when it shouldn't have been stopped, 
software is designed to support the following rule: 



the 



Never stop 
Multics is in 



a disk drive 
operation. 



manual ly whi le 



When the system demounts a disk pack, either a storage system 
Physical volume or an I/O pack. It will always unload the disk 
drive by program control. 



£liaa flftS-tO Old Operator Cp m fflan dS 
adddev, addd 



deldev, deld 



Now allowed In ring i as well as ring k. 
This command may specify a storage system 
disk drive which has been deleted by the 
deldev command. 

Now allowed in ring l as well as ring *♦. 
This command may specify a storage system 
disk drive. If the drive is currently in use 
for paging, an error occurs. Otherwise, the 
irive is made unavailable for storage system 
use. 



f orce_reset 



Name changed from "force". 
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storaget stor Abbreviation changed from "dvm**. Output 

format changed. 

multlcs* mult Now mounts volumes if necessary. 

standard, stan Now mounts volumes if necessary. 

startup* star Now mounts volumes if necessary. 
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ii£H_SJLU£A£Efi 

The storage system structure repair procedures known 
collectively as the salvager have been extensively modified in MR 
<**0* both for automating crash recovery and for handling the 
structural changes in the storage system data. The salvager 
programs are now part of the standard system tape? new salvaging 
modes have been introduced and some old nodes redefined; and 
control of the salvager is now from command options rather than 
from the processor switches* There are now four kinds of 
salvaging operation which the system can perform. These are 
emergency shutdown t volume salvage* directory hierarchy salvage* 
and on-line salvage. The system has been modified to invoke the 
salvager automatically whenever data in the storage hierarchy may 
have been damaged* 

£ffi&cqency Shutdown 

Emergency shutdown has been reworked completely and greatly 
improved. It is much more reliable than in pre-^.O systems. 

Sometimes the system crashes before the storage system has 
been turned on. Previously* an attempt to emergency shutdown in 
such a situation would lead to another crash, and might do 
serious damage to the directory hierarchy. This has been changed 
so that if a premature emergency shutdown is attempted, the 
following message is printed} 

ESO BEFORE FS ENABLED 
SHUTDOWN COMPLETE 

and the directory hierarchy is untouched. 

It is always safe to attempt an £SD, and If emergency 
shutdown crashes it may be retried. 



Voluwe saiyaaiaa 

Volume salvaging insures that there are no reused addresses 
or ill-formed VTOC entries in the VTOC and volume map of a single 
physical volume* 

If a volume was in use by Multics and was not demounted or 
shut down by normal or emergency shutdown, it will be salvaged 
automatically the next time that the physical volume is accepted 
for paging* 

The operator may force the volume salvage of a particular 
volume by typing the command 

salvage.vol <vol_name> <drive> <options> 
Examples salvage.vol new dska_02 -check_dir 
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This operation cannot be done once the volume has been accepted 
for paging. Options nay come from control arguments or from the 
SALV card. The **-check_dir*' option causes the connection between 
the VTOC entry and the segment's directory entry to be checked? 
if there is no directory entry for the VTOC entry? the VTOC entry 
v<i I I be deleted* 

To cause the volume salvage of all physical volumes which 
are assumed present or Known but not yet in use* issue the 
command 

salvage.vol -all <options> 

A special interface is available to force the volume salvage 
of the Root Physical Volume. Typing 

BOOT RPVS 

Mill force the RPV to be salvaged during boot load. (Part of the 

directory hierarchy on the RPV Mill also be salvaged* as 

described below. I The RPVS option may be combined with any other 
command* so that 

BOOT RPVS SALV 

is a valid command* which calls for a volume salvage of the RPV* 
a salvage of the directory hierarchy existing on the RPV* and 
then a directory hierarchy salvage of all directories* 

The "*-check_dir" option for the salvage_vol command cannot 
be used on volumes which are part of the RLV. Volume salvaging 
can only be done on un-accepted volumes? but in order to do the 
-check_dir operation* the the RLV must be completely accepted so 
that all directories can be looked at. If the directory salvager 
destroyed a branch for a segment on the RLV* the "orphan™ VTOC 
entry would never get cleaned up if Multics were unable to 
connection salvage. A special scheme is provided to do a 
salvage_vo! of a caay. of any physical volume of the RLV. Using 
BOS* the operator copies the physical volume or physical volumes 
to be checked onto scratch packs. After bootloading the system* 
the operator then tyoes 

salvage.vol <pv_name> <drive> -copy <drive2> 
Example* salvage_vol root2 dska_0i -copy dskb_05 

changes* if any* are made to the copy* not to the version of the 
RLV pack that the system is running on* After all salvage 
operations have been done* the system can be shut down and the 
salvaged copies used to replace the old versions* 
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tUscarchE.Sfl I vagina 

Hierarchy salvaging is the most like the pre-^.Q salvager! 
it corrects ail errors in directories* rebuilding the directories 
if necessary. The directory hierarchy salvager is invoked by 
operator command by typing 

salvage_dirs <options> 

Example* salvage_dirs -check_vtoce 

The *"-check_vtoce M option specifies that connection from the 
directory entry to the VTOC is to be checked; if a directory 
entry has no VTOC entry it will be deleted. The "-rebui Id- 
option specifies that ail directories should be rebuilt. Both of 
these options increase running time substantially. 

RPV SALVAGING 

Whenever a volume salvage is done on the RPV* the directory 
hierarchy salvager is invoked to salvage the root directory and 
every directory at up to two levels below the root if all the 
directory's parents are on the RPV. This operation is done in 
order to make sure that the system can complete bootload and come 
up to ring 1 command level. 



RLV SALVAGING 

Before leaving ring l, the system automatically salvages 
directories down to level three of the directory hierarchy if any 
volume of the root logical volume was automatically volume 
salvaged. This action* called RLV salvaging* is taken because 
such a volume salvage may have detected a reused address and 
introduced a page of zeroes into a crucial directory. 

flQ-klQfi.Sa Imager. 

The on-line salvager is invoked by recovery mechanisms when 
certain software errors or hardware failures occur. It can also 
be invoked manually by a system programmer who calls 

hphcs_$sa!vage_directory (path) 

The MR <*.Q version of the on-line salvager has been substcntlal iy 
improved over previous versions. 
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£djaioa»ii£iLL££_FJ.USb 

The paging device* if present in a configuration, Mill be 
flushed in stages as each volume is accepted. Except in cases of 
emergency, the foiiowing ruie should be observed* 

After a crash, try ESQ. 

If emergency shutdown does not complete, make 
sure that all volumes in use at the time of 
the crash are accepted during salvage. 

Observing this rule insures that ail information on the paging 
device will be flushed back onto the volume where it belongs. 

The system will not exit from ring l until the paging device 
has been completely flushed. 
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ttEa_E8Bfift.a£5SA6ES 

These messages have been changed to show the subsystem and 
drive number. The general error will look like this* 

disk__control* dev attention for dsk7 k (lorn i chn 3Q) cmd k2 

Stat 422000000000. 
disK_control t dsk7 <► sect=765, cyl=i4* hd=0* addr=i3370. 
disk_control * dsk7 t* detailed status* 4fl 00 SO 80 00 00 

The detailed status message will only be printed in cases where 
it is useful. If the disk unit is unusable* for example if it 
has gone into standby state* the message 

disk_control * dsk7 k requires intervention. 

will be printed and the alarm will sound. The operator may ready 
the drive, after correcting the problem; the system will then 
type 

disk_control * dsk7 4 now operative. 

and attempt to use the disk unit again. 

The other possible error messages about disk will not* in 
general* require operator intervention. 

disk_controJ * I0M system fault for dsk7 k. 

disk_control* Ignored special on dsk7 *♦• 

dlsk_control t Interrupt from unknown devx 7, sx 7. 

status = ^22000000000- 
disk_control * Lost IOM interrupt for dsk7 k Horn l chn 30). 
disk_control* Unexpected IOM status 422000000000777000000000 

for dsk7 k (iom 1 chn 3Q). 
disk_control * dsk7 4 tally residue - 000i. 

The error message printed by BOS for a disk error is similar 
to the Muitics message. It looks like this! 

ERROR ON M400 A 30 4 (0SK7) 

CM0=32, S=3<»<+5, AOOR=666000, STAT= 422000 777000 
DETAILED STATUS* 22FOO0 Q0GQ00<*OQQ 

The subsystem name (0SK7 in the example) may be replaced by stars 
if BOS has not yet read the CONFIG deck. 
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flaflilflafl-Eccac-ttassaafis 

If the operator attempts to boot the system with the clocK 
set to an obviously baa value* the system Mill crest* with one of 
these messages J 

init_pvt* clock malfunctioning 
init_pvt» incorrect clocK setting 
init_pvti clock reads time before rpv label 

this crash occurs before any changes are made to the disk 
contents. 

An attempt to boot the system with a non-root volume where 
the RPV should be will usually result in a crash with one of the 
messages 

init_pvt« no root 

init_pvt« dska 3 has no Multics label 

init_pvti no part he on root dska 3 

the ROOT card must be corrected* or the contents of the RPV 
restored. Once again* no changes have been made to the disk 
contents. 
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Several of the standard operational procedures are affected 
by the new storage system. 

The system programmers will have set up some new RUNCOM 
files for the standard SAVE procedures. At least the following 
wi I I be provided! 

SAVET Save all volumes to tape 
RESTT Restore all volumes from tape 

When a new volume is added to the system, or any volume is moved 
from one disk unit to another, these RUNCOM files must be 
updated. 



itaQdaLd-OMJuas 

The regular incremental, catchup, and complete dumping 
procedures will not change too much with MR *♦.€, but the 
installation management may choose to rearrange the dump control 
files. 



If the PRPH OSKx card is changed, the system is unable to 
assume anything about the location of any volumes on the next 
boot load. So after a change to the PRPH OSKx card, the operator 
will have to type an **a<2d_vol w command for every volume in the 
system. 

In order to add a new volume to an existing logical volume, 
the operator must shut down and reboot, and type an 
"initialize_disK" command for the new volume when ring l command 
level is reached. 



£casb...RfiCftM£CY. 

Many internal changes have beer made to Multics so that it 
will crash less often and make crashes which do occur easier to 
recover from. 



MULTICS OPERATING STAFF. NOTE MOSN-AQQi page 28 



PAGING DEVICE RECOVERY , 

After a system crash, the standard procedure is to attempt 
an ESO first. If ESQ fails or cannot bo attempted because core 
has been lost, do a 

BOOT SALV 

to cause the salvager to be run. If the ESO was not done, the 
foil owing message will be printed when the salvager is 
boot loaded: 

init_pvtx paging device Mill be flushed! 2QkQ records 

If this message occurs, The paging device records for each volume 
will be flushed onto the volume as it is accepted for paging. 
(This operation takes a few extra seconds for each volume.) At 
the ena of salvaging, if the operator types "startup", 
"standard", or "multics", the system will attempt to enable the 
paging device, and if successful will print the message 

enabled pdt 20<t0 records 

giving the size of the paging device. If some volumes, which 
were mounted at the time of the crash, don't get accepted during 
the next bootload (salvager or regular), the paging device may 
contain pages which must be flushed before the paging device can 
be used for regular paging. The system will refuse to enter 
normal operation if this is so, and will print 

error! paging device unflushed. need 2 vols for 78 recs 

Command » 

The system will not enter standard mode (ring **) until the paging 
device is completely flushed. In some cases, for example if a 
pack has a head crash, it nay be impossible to flush the paging 
device completely! in other cases, for instance if a disk MPC 
goes down, several bootloads with different volumes on-line will 
be required to get all PD records flushed. Once all flushabie 
records have been flushed, the operator must issue the command 

f orce_pd_abandon 

to clear the paging device of records which cannot be flushed. 



OISK UNIT FAILURE 

Often, only one disk pack or disk unit is involved in a 
system failure. The symptom that an operator will notice is a 
burst of write error messages for the drive, and then a message 
like 
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disk_control * dsk7 <* requires intervention. 

with an audible alarm. The error messages may repeat 
periodically. In some cases* the system crashes when a disk unit 
fails; but often the system will continue operating although 
without the avaiiabiiity of segments on the device affected. If 
a disk drive has dropped into standby* and the system is still 
operating, the operator should attempt to ready it. If the drive 
can be made ready* the system will print 



disk_control t dsk7 *» now operative. 



and attempt to use segments on the drive again. If there has 
been a head crash or the disk unit has become unusable* the 
operator must shut down, substitute a spare or repaired disk pack 
and drive* and use RESTOR to restor the contents of the volume 
from the last SAVE by typing 

RESTOR input_medlum 
0SK7 k ENTIRE USER_PACK 8 
END 

and mounting the appropriate tapes or SAVE packs. The next step 
is to reboot the system, and reload the segments which have 
changes since the SAVE by issuing the following command* 

reload -pvname user_pack_8 

and allowing reload to scan all catchup and Incremental tapes 
made since the SAVE. If the site has a paging device, and there 
are pages for the damaged volume on the paging device, it would 
not be safe to flush these pages back onto the new pack, even 
after reloading! so the system staff will probably have to zero 
the paging device as described above. 

If several volumes are damaged, and some are from the RLV, 
these volumes should be reloaded before non-RLV volumes are 
attempted. 



£te£hlng Nuabecot Records left 

The system handles out-of-disk much better? running out of 
disk on most volumes is no longer a system crash, although it may 
annoy users with segments on the volume. 

The device_meters command no longer tells how many records 
are left. To get a summary of what volumes are on-line and how 
much room is left on them, type 

list_vols 

while in admin mode. The output is sorted by logical volume 
name. If the argument "-lv NAME" or **-pv MAME" is given, only 
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that physical or logical volume will be listed. The output looks 
like this* 

Drive Records Left VTOCs Le't PV name LV name 

dsKa_02 P 17752 3688 2817 1850 rpv root 

dska_Q*» P 17752 3333 2817 1865 cisl2 root 

dska_03 18322 M02 *H35 2<»38 Idd libraries 

The "P" flag above indicates those drives containing partitions. 
If the "-total" argument is given, the output is 

Records Left VTOCs Left LV Name 

18322 ^102 *»135 2<i38 libraries 
3550*» 7021 563*» 3715 root 

and the operator "storage" command now does a "list_vols -tt". 
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APPENDIX A 



LIST OF OPERATOR COMMANOS 



The following list shows all ring-i and ring-** commands. 
Unless otherwise noted in the "Ring" column, the command is fop 
ring-<* only. 



Command 




Abbrev 


Slag 


abs 




abs 




accept 




acce 




add_lv 




al v 


NEW both 


add_vol 




av 


NEW both 


add_vol_ 


registration 


avr 


NEW both 


addcpu 




addc 




adddev 




addd 


CHG both 


addmera 




addm 




addpage 




addp 




admin 








attach 




atta 




bos 






both 


bump 








change_vol_registratlon 


cvr 


NEW both 


cripple 




crip 




define 




defi 




del_l v 




dlv 


NEW both 


del_vol 




dv 


NEW both 


del_vol_j 


registration 


dwr 


NEW both 


deicpu 




dele 




deldev 




deld 


CHG both 


del mem 




delm 




delpage 




delp 




deroute 




dero 




detach 




deta 




develop 




deve 




down 








drop 








exec 




X 




f orce_reset 




CHG 


f orce_pd. 


.abandon 




NEW ring-i 


go 








help 






ring-i 


hmu 








init_vol 






NEW both 


intercom 




ic 




list_disKs 


Id 


NEW both 


list_vol. 


..registration 


1 vr 


NEW both 


1 ogin 




logi 




logout 




logo 




maxunits 




maxu 




mc.l ist 








mcon 




mc 
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message 


mess 






multics 


mult 


CHG 


both 


no_start 


ns 






quit 








rep 








redefine 


rede 






reload 






both 


re 1 oad_sys temjr e 1 ease 






ring-i 


remove 


re mo 






reply 


r 






reregister 




NEW 


ring-l 


reroute 


rero 






reset 


rese 






route 


rout 






salwage_dirs 


salv 


NEW 


ring-i 


sal vage.vol 


sv 


NEW 


both 


shutdown 


shut 




both 


standard 


stan 


CHG 


ring-i 


startup 


star 


CHG 


both 


stop 








storage 


st or 


CHG 




substty 


subs 






sysid 


sysi 






terminate 


term 






unbump 


unbu 






undef ine 


unde 






warn 


w 






who 








word 
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APPENDIX 8 
COMMAND DOCUMENTATION 



Only new commands are written up in this section. Consult the 
Multics Operator's Handbook for other commands. 
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MaJB£» 



add_vol_registration» avr 



E.UQ£±i£Q* Register a new physical volume. If the logical volume 
does not already exist* register the new logical volume also* 

S yn ta x 1 add_ vol_registration pv pv_name control_args 



AcayafeQiai 

pv 
pv_name 

JlfiDlcoi Acamaaais* 

-Iv LVNAME 
•model MODNO 



is the literal string "pv" 
is tt\e physical volume name 



Specifies the logical volume name. This 
argument must be provided. 

Specifies the Honeywell model number for the 
disk pack. If omitted* the default is 400. 
The following are valid values for HOONOt 



i8i 


DSU181 


191 


0SS191 


<*00 


MSU0*»00 


<*50 


MSU0^5fl 



-serial SER 



Specifies the manufacturer's serial number 
for the pack. If this argument is omitted, 
the default is "none." 



The remaining arguments are valid only when a new logical volume 
is being registered. Otherwise they are ignored. 

-owner Person. ProJ ect Specifies the user identifier of the 

volume owner. If omitted the Person.ProJ ect 
of the user executing the command is used. 



-access_low xxx 
-access_high xxx 
-public YESNO 
-acs PATH 



Specifies the minimum sensitivity level for 
information on the volume. 

Specifies the maximum sensitivity level for 
information on the volume. 

Specifies whether the volume is public. If 
omitted the default is "yes." 

Specifies the path name for the ACS. 



MULTICS OPERATING STAFF NOTE MOSN-A001 page 35 

Mai£* change_vol_reglstration» cvr 

EUGCliflD.* Modify logical volume or physical volume registration. 

Syntax* change_vol_registration pv pvname control_args 
change„vol_registratlon Iv lv_name contro7_args 

pv is the literal string "pv" 

pvname is a physical volume name 

«« is the literal string "Iv" 

lv_name is a logical volume name 

£&Q±cai &£SUasatS* The following control arguments are valid 
when "pv** is specified! 

-model MOQNO Specifies the Honeywell model number for the 

disk pack. The following are valid values 
for MOONOI 



181 


DSU181 


191 


0SS191 


^♦00 


MSUO^OQ 


t*SQ 


MSUO^SO 



-serial SER Specifies the manufacturer's serial number 

for the disk pack. 

-location LOG Specifies the current location of the disk 

pack. 

-date_registered OATE Specifies the date the physical volume was 

registered. 

-name PVNAME Specifies the physical volume name. 

-pvid PVIO Specifies the unique identifier of the 

physical volume. 

The following arguments are valid when "Iv" is specified* 

-owner Person.ProJect Specifies the user Identifier of the 

volume owner. 

-access_iow xxx Specifies the minimum sensitivity level for 

information on the volume. 

-access_high xxx Specifies the maximum sensitivity level for 

information on the volume. 

-public YESNO Specifies whether the volume is public. 
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-acs PATH Specifies the path name for the ACS. 

-name LVNAME specifies the logical volurce name. 



a . . t ^i i t j -r r\ 



-iwiu LViu specifies me unique identifier of the 

volume* 

£i£i£S_: Changing the name or unique 10 attributes of a physical 
volume or logical volume is an operation which is only done to 
correct a wrong registration file. The volume label is not 
affected by the change to the registration file, and simply 
changing the registration file will usually have only the effect 
of Making the volume or logical volume unaountable 
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MaJB£i del_vol_reglstration, dvr 

EmocH&Q* Unregister logical volume or physical volume* 

SYQias* del_vol_registration pv pvname 
del_vol_registration Iv lv_name 

pv is the literal string "pv" 

pvname is a physical volume name 

*v is the literal string "Iv" 

lv_name is a logical volume name 

When "pv" is specified, 1he command will refuse to leave a 
logical volume with no physical volumes in it. 

When unregistering a logical volume, the physical volumes being 
releasee will be listed. 
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fjame,* 



I ist_vol_registration, Ivr 



fUDCflfln* Print registration information for logical volume or 
physical volume* 

Syntax: I lst_vol_registrstion pv pvname 

I ist_vol ^registration Iv lv_name control_ar*g 



pv 

pvname 

Iv 

I v_name 



is the literal string "pv" 

is a physical volume name 

is the literal string "Iv* 

is a logical volume name 



££fl±Ltti Arguments* If "Iv" is specified, the "-brief" C*-bf"> 
argument lists only physical volume names* 

£&a mole > 



I ist_vol_registrat ion Iv root 
Ivnamet root 
Ivid* 
owner: 
publ id 

min_access_cl ass* 
max_access_c! ass* 
acs_path* 



220531524466 

Initial izer.SysOaemon 

yes 

0*000000 

71777777 

> lv>root« acs 



npv* 



pvname* rpv 
pvid* 
serial * 
model * 
location* 



220531524345 
2733-58 

onl ine 



pvname* root2 
pvid* 
serial * 
model * 
I ocation* 



57Q144Q45160 
2733-59 
400 
onl ine 



I ist_vol_registration Iv root -bf 

rpv 
root2 
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S^f 1 ^* I eH . th ! SySte ™ ttiat a «>hvslca-l volume is on a disk 
drive. Read and check the label. 

S^Eiax* add_vol pvnasRe csrive_name 
add^vol -all 

P vname is the name of a physical volume 

drive_name has the form <subsys>_<nn> 

k&QlLflJL Araument S l 
" al1 Hount all assumed physical volutes 

^ £ ?L .I h ? , : e9i f tratiori f i*e for <pvname> is consulted to find 
out the logical volume name and to validate the label. 

The volume label is read and checked. If the label is correct 
the drive is left in the kncan state. correct 

If an add I* commano for the logical volume containing this 
!"' volume has oeen previously issued, and if this add vol 

tlcTotL c fT et ? s the ,0fllcal vo,uffle » the ,o 9 icai voju-; Vs 

accepted for paging and a message is printed. 
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MsUBfi* add_lv» alv 

EuDClian* Cause a logical volume to be accepted for paging* 

mLxuxua. * add_iv i v_riasfte 
add_l v -al I 

Axaiii^ala* 
I v_name is the name of a registered logical volume 

-all Mount all incomplete logical volumes. 

HflifiS. 1 If all physical volumes for the logical volume are 
already accepted* Known, or assumed, add_l v will Insure that all 
labels have been read and checked, and will then accept the 
logical volume for paging* 

If one or more volumes are missing, add_.lv will assign drives for 
the missing volumes, print mount messages for each missing volume 
in the form 

mount pv k202 on oska_07 

and set the assigned drives Into the assumed state. The operator 
may mount the physical volumes where requested or use his own 
Judgement. As each physical volume is mounted, the operator will 
issue an add_vol command to the system; the last add_vol command 
will cause the logical volume to be accepted with a message of 
the form 

private Iv cp22 mounted 

When the add_.lv command is issued, all assumed drives should have 
the correct contents? otherwise an error message will be typed* 

The list_disks command lists all outstanding add_lv's* 

The del_lv command can cancel an outstanding add_iv. 
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£Um£* del_vol. dv 

fLiincULaa* Tell the system that a physical volume is no longer on 
a drive* 

£mla&* del_vol drive_na«e 

drive_name has the form <subsys>_<nn> 

MalfiS* The drive specified may not be in use. See the del_lv 
command for demounting logical volumes which are in use. "~ 
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iiafflfi* del_lv f dlv 

FuQgfJBD* Tell the system to force the demounting of a logical 
vol ume. 

S yn t a x t del_lv Ivname 

Axaujnfiola» 

Ivname specifies the name of a logical volume 

ty ot es: If the logical volume is in the process of being mounted* 
this command cancels the request. 

If the logical volume is already mounted* this command makes the 
segments on the volume unavailable to all users* and shuts down 
and unloads all physical volumes in the logical volume with a 
message of the form 

demounted dska_32 
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Nape: init_vol 

EilfiCliao.* Write the label of a new physical volume. Set up its 
VTOC and volume map* This operation destroys any previous 
contents of the physical volume. 

Sxolaj&* init_vol pvname drive_name control _arg 

pvname is the name of a physical volume 

drive_name nas the form <subsys>__<nn> 

Contr ol Arguments * 
-special Enter dialogue with the operator. 

Sfi££iai JlflifiS 

In special mode the operator may specify the position and size 
of partitions on the physical volume. 

The following request lines may be typed 

part NAME HILOW SIZE Where NAME is a ^-character partition name, 
HILOW is either "high" or "low", and SIZE is the 
partition size in records. 

avg FFF. FF Specifies the average segment length for segments on 
the physical volume. The default length is 5.Q. This 
number is used to calculate the number of VTOC entries 
on the volume. 

list lists the partitions defined so far. 

end causes the physical volume to be initialized. This 
operation takes about 90 seconds* 

quit causes an exit without doing anything. 
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Hajia* list_disks, Id 

Fun ctjpni list the usage of storage system disk drives and ail 
pending add_Jv"s. 

Syntax' list_disks arg 

AxaUffiSQlS I 
drive_name is the name of a drive to be listed 

Qonl ro) Arg u men ts* 

-Iv LVNAME list only drives pertaining to LVNAHE 

-pv PVNAME list only drives pertaining to PVNAME 

-brief* -bf list only nonempty drives 

-mount» -mt list only pending add_.lv* s 

EsaiDfiie.1 

list_disks 

dska_0i root2 root 

dska_02 new (blue) * 

dska_03 Cio drive) 

dska_Q<* 

dska_Q5 (deleted) 

dska_06 true (blue) *** 

dska_Q7 

dska_Q8 

dska_09 

dska_lQ 

dska_li 

dska_i2 rpv root 

dska_13 

dskb_Ql 

dskb_Q2 

dskb_0 3 

dskb_0<* 

dskb_0 5 

public Iv blue mount in progress 
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M&!D£* reregister 

f MQ Ctio.D* Regenerate volume registration information. 

Syntax* reregister pvname drive_name 

pvname is the name of a physical volume 

drive_narae has the form <subsys>_«nn> 

Jlalas* This co»mand reads the label of the volume on the 
specified drive name* If it is a valid label for the volume 
whose name is given, the registration data is refabricated from 
the label and the drive is left in the known state. 



MULTICS OPERATING STAFF NOTE MOSN-A0Q1 page t*b 

£Laffl£j force_pd_aoandon 

fJiDCilflQ 1 Discard ail data on the paging device. 

<? *. M. + -t U • * «* •* ^~ ^ « *J -* l~ — M. *i * _ 

jtJUIJ.aA' < wi tB _MU_auai!yuM 

Allflli OlfiQla J none 

ilfllfii* This command destroys information. It should be used 
only after a system catastrophe which has left pages on the 
paging device whicn cannot be flushed; and the command should 
not be invoked until all physical volumes which can accept data 
from the paging device have been flushed. 
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N>we: sal vage_dirs» salv 

functi on * Salvage the directory hierarchy. 
Syn ta x* salvage_dirs control_args 
Argu aent^ t none 

Gon i c-p j Augments* 

-check_vtoce Delete branch if VTOCE missing 

-rebuild Rebuild all directories 

-pathname Print pathname being processed 

-long -check_vtoce -rebuild -pathname 

-console Output to SYSERR console instead of printer 

-dump Dump damaged objects 

-debug System programmer use only 

-level N Salvage levels fi-N only 

The SALV card may specify some default options. 
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N am ei salvage.vol. sv 

FypcliPQ* Volume salvage a physical volume. 






saivage_voi pvname arive__name toiuroi_ai yi 
salvage_vol -all control_args 



pvname 

dr ive_name 

£sni.c_ai Aciayifinla* 
-console 
-check_dir 
-copy DRIVE 
-dump 
-debug 



is the name of a physical volume 
has the form <subsys>_<nn> 



Output to SYSERR console instead of printer 
Delete VTOCE if no branch 
Salvage inactive copy on DRIVE 
Dump damaged objects 
System programmer use only 



tyotes: If -all is specified, all known and assumed physical 
volumes are salvaged. 

An accepted physical volume cannot be salvaged* 

The -copy option is used to salvage a copy of an active volume, 
usually because the operator wishes to use the -check_dir option 
on a volume of the RLV. 



The SALV card may supply some default options. 



